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SYSTEM AND METHOD FOR MANAGING ADVANCE DIRECTIVES 



BACKGROUND OF THE INVENTION 

5 1 . Field of the Invention 

The present invention relates to systems and methods for handling data, 
and in particular, to techniques and equipment for dealing with advance 
directives. 

10 2. Description of Related Art 

An advance directive is a type of written or verbal instruction about 
health care to be provided if a person becomes unable to make decisions 
regarding his or her medical treatment. As used herein the term advance 
directives shall include, but not be limited to, health care proxies, living wills, 

15 a do not resuscitate (DNR) instruction, or information/instructions about organ 
donation. 

Increased awareness of the importance of advance directives has 
prompted various laws encouraging their use. Under the Federal Patient Self- 
20 Determination Actof 1 991 , hospitals are required to ask patients about advance 
directives and assist them if they wish to prepare an advance directive. In some 
jurisdictions, state law will require the custodian of an advance directive or the 
possessor of information about an advance directive to release information 
about the advance directive in response to proper requests for this information. 

25 

U.S. Living Will Registry of Westfield, NJ operates a database where 
digital images of advance directives are centrally stored. In the traditional 
scheme, individuals that registered and stored their advance directives on this 
database have agreed in writing that the stored information will be made 
30 available to a wide class of service providers, such as hospitals, physicians, etc. 
Health care providers that are privileged subscribers to this registry have been 
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able to automatically access database documents that were previously and 
independently registered by patients. Subscribers have obtained documents by 
using a secure Internet web site employing encrypted transmission, or by using 
automated telephone systems that send documents to registered facsimile 
5 machines. Non-subscriber health care providers have been able to obtain 
documents from the registry by calling and requesting the documents. 

Traditionally, this registry placed all authority in the person executing the 
advance directive by virtue of a registration contract signed by the person. This 
approach did not take into account the fact that service providers such as 
hospitals often gain custody of these instruments without the benefit of a 
registration contract. Nevertheless, these service providers need to take 
appropriate steps to store and organize these instruments and, when 
appropriate, make them available on short notice, often during emergencies. 
The difficulty of this task is compounded when the service provider is part of 
a network of hospitals that want to deal with these advance directives 
cooperatively. 

Referring to references mostly filed after the commencement of the above 
20 noted operations by U.S. Living Will Registry, in U.S. Patent Application Publica- 
tion No. U.S. 2003/0040939 a person can complete an advance directive and 
send it to a facility that will scan the document and store it in a database. 
Using a password, authorized users can access this information either over a 
telephone network or over the Internet. The information can be retrieved either 
25 by facsimile or by printing a document obtained over the Internet. 

In International Publication No. WO 01/06436 advance directives can be 
scanned and stored in a central database for access by authorized individuals. 
A user can designate in advance a list of key institutions that will have access 
30 to this information. The system has "expert" features that check whether the 
stored directives comply with a relevant jurisdiction. See also U.S. Patent 
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5,241,466. 

In International Publication No. WO 02/37235 a participant is provided 
information and asked a number of questions regarding life planning issues, 
5 including questions about living wills. After all the information is supplied, 
information is stored in a database and can also be sent to a designated person. 
Information in this database can be accessed by "the client, the assigned 
caregiver(s)/ person(s) listed in charge of future arrangements, the assigned 
attorney, the coroners office, and/or emergency medical personnel." Initiation, 
10 access, and continuation of the centralized data storage is controlled by the 
participant, although third party updates can be authorized. 



In International Publication No. WO 01/99027 emergency personnel can 
identify a patient by scanning the iris of, or a transponder worn by, a patient. 
1 5 This identifying information is sent wirelessly over the Internet to a database 
that stores advance directives that are then retrieved and displayed to the 
emergency personnel. 

In U.S. Patent Application Publication No. U.S. 2002/0196141 patient 
20 information can be stored on databases maintained by individual hospitals or on 
a central server. A system administrator can establish which subscribers have 
access and the level of access. Subscribers such as doctors, hospital personnel, 
insurance companies, etc. gain access to the database by using either a 
password or by presenting for scanning a token with a bar-code. 

25 

In U.S. Patent Application Publication No. U.S. 2002/0169638 a 
database of medical records can be accessed by a medical entity. The reference 
describes connecting to a database server through wireless devices having a 
range of 20^ miles or more so that "medical facilities and providers can link 
30 together, thus sharing patient data and allowing for continuous access to the 
patient electronic record." Paragraph 14. 
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U.S. Patent Application Publication No. U.S. 2001/0034617 describes 
a system where hospitals or other cooperating companies can be authorized by 
a patient to gain access to medical records stored in a database. The hospitals 
5 and the patient must both register with this service. 

In U.S. Patent Application Publication No. U.S. 2002/0029264 a hospital 
or other subscriber can send raw MRI image data for processing by a central 
server. The processed information can be sent back to a number of different 
10 hospitals designated by the originating hospital. 

In U.S. Patent Application Publication No. U.S. 2002/01 88467 patients, 
health-care providers, insurance companies, and pharmacies can gain access to 
patient information stored on a central server. Unauthorized access to the 
1 5 server is prevented by (1) employing hardwired business to business 

connections; (2) encrypting information sent over the Internet; (3) passwords; 
(4) compartmentalizing information by allowing a user access to only those 
portions of a patient's medical records that are necessary for the issue at hand; 
and (5) providing information on a CD-ROM. 

20 

In U.S. Patent Application Publication No. U.S. 2002/0103675 patient 
information may be sorted by patient or by hospital and stored in a central 
database. Users such as patients, physicians, hospitals, pharmacies, etc. can 
gain access to the patient information. 

25 

In U.S. Patent Application Publication No. U.S. 2001/041991 medical 
records can be accessed over the Internet by a patient or by individuals 
authorized by the patient. 

30 The description herein of some references having a publication or 

issuance date less than one year from the effective filing date of the present 
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application, does not imply the reference is prior art, but is included simply to 
enhance the scope of applicant's disclosure. In this regard, see U.S. Patent 
Application Publication No. U.S. 2003/0120527 (access to patient information 
over the Internet granted depending on the individuals 1 need for information); 
5 U.S. Patent Application Publication No. U.S. 2003/0101081 (surgeons 

individually or as a group can subscribe to a service that stores postoperative 
notes that are made available to them, hospitals, patients, anesthesiologists, 
etc.); U.S. Patent 6,157,914 (a hospital can download centralized medical 
information from a different hospital, switching to different systems in order to 
10 gain access); U.S. Patent 6,604,1 1 5 (cardiovascular data stored in a database 
is made available over a network either intrahospital or interhospital); and U.S. 
Patent 6,574,742 (hospitals can outsource their picture archiving and 
communications systems (PACS) requirement by communicating over a network 
to a central database). 

15 

SUMMARY OF THE INVENTION 

In accordance with the illustrative embodiments demonstrating features 
20 and advantages of the present invention, there is provided a method for storing 
and retrieving advance directives with a database coupled to a communications 
system. The method is performed on the initiative of a service provider, by 
registering and storing information about the service provider on the database 
in anticipation of future creation of advance directives that will come into at 
25 least the temporary possession of the service provider. The method also 
includes the step of storing on the database information supplied by the service 
provider about a person and the person's advance directive. Another step is 
automatically transmitting upon request by the service provider information 
about one or more advance directives that were stored in the database by the 
30 service provider. 
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In accordance with another aspect of the invention a system is provided 
for storing and retrieving advance directives. The system has a communications 
system, and a database coupled to the communications system. The database 
is arranged to register and store information about a service provider in 
5 anticipation of future creation of advance directives that will come into at least 
the temporary possession of the service provider. The database is arranged to 
store information supplied by the service provider about a person and the 
person's advance directive. The communications system is operable in 
response to a request by the service provider to automatically transmit informa- 
1 0 tion about one or more advance directives that were stored in the database by 
the service provider. 

By employing systems and methods of the foregoing type, advance 
directives can be stored and retrieved in a highly efficient and effective manner. 

1 5 In one preferred embodiment, the system can be arranged to handle advance 
directives whether or not they are controlled by a written registration contract 
executed by the person covered by the advance directive. Such a system 
would allow a hospital to obtain possession of advance directives executed by 
hospital patients and store them as an electronic record in a central database 

20 that can be become a central repository for any hospital. Once stored in the 
central database, these advance directives can be made accessed by hospitals 
in the same network or, if proper under the recording guidelines, by any 
independent hospital or healthcare provider. 

25 The preferred system can be operated so that advance directives are 

automatically released depending on predetermined rules. If documents are 
stored unaccompanied by a registration agreement executed by the party 
benefitted by the advance directive, they are placed into the originating facility's 
restricted collection and access to them is limited. The features listed below 

30 detail the various options by which access to the restricted documents are 
limited. 
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When a health care provider member is initially set up in the registry 
database, the criteria for that particular provider are entered. This includes a 
decision tree whereby a computer system checks to see whether access to that 
particular provider's restricted documents are controlled by (a) the state in 
5 which the document was registered, (b) the network of health care providers 
that the originating provider belongs to, and (c) the facility class of the 
originating facility (hospital, nursing home, hospice, doctor's office, etc.). 



Restricted documents are always accessible to the originating provider. 

1 0 When a member provider other than the originating facility requests a restricted 
document, the system compares the Source ID Code of the requesting provider, 
with the Source ID Code of the facility listed for the requested document, and 
goes through the various options. The system will then either validate the 
request and send the document, or it will respond with a message that the 

1 5 documents exists, but is not accessible to the requesting provider. The 
requesting provider is then referred to the originating provider so that they may 
work out possible release of the document directly between the two providers. 

If a state has a law prohibiting the withholding of an advance directive 
20 for any reason, the program permits advance directives registered from that 
state to be made available to any requesting provider. 

The system also allows the sharing of restricted documents with all 
facilities within a health care network, such as a hospital system, even if such 
25 a system has facilities in different states. 

The system also allows access to documents to be restricted to certain 
classes of facilities within the same network. 
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BRIEF DESCRIPTION OF THE DRAWINGS 



The above brief description as well as other objects, features and 
advantages of the present invention will be more fully appreciated by reference 
5 to the following detailed description of presently preferred but nonetheless 

illustrative embodiments in accordance with the present invention when taken 
in conjunction with the accompanying drawings, wherein: 

Figure 1 is a schematic diagram of a system operable to perform a 
10 method in accordance with principles of the present invention; 

Figure 2 is a logical diagram associated with the system of Figure 2; and 

Figure 3 is a flowchart associated with the system of Figures 1 and 2. 

15 

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS 

20 Referring to Figure 1 , the illustrated schematic shows a system with a 

database 10 in the form of a mass storage device coupled to a computer 12. 
Computer 1 2 is connected to local area network 1 4, as are workstations 1 6 and 
18. Network 14 also connects to internal local area network 26 through a 
router 24, which has a secure firewall. 

25 

Network 14 also connects to a communications system, shown herein 
as computer 28. Computer 28 has an input connected to a document scanner 
29. Computer 28 includes a telephone messaging system shown connecting 
through a plurality of telephone lines 30 to the public switched telephone 
30 network 32. This messaging system is of the type that can respond to callers 
by providing an announcement offering a number of menu choices or prompts 
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that are selected when the caller presses a specified key on the caller's 
touchtone telephone set 34. In a well-known manner, the caller can continue 
to select different options and work with computer-generated verbal instructions 
to navigate through a hierarchical menu. 

5 

The messaging system in computer 28 can respond to callers' touchtone 
selections by sending communications requests along network 14. In some 
instances the information returned along network 14 to computer 28, is 
recognized as a requested telephone number, and is used to place a call over 
10 one of the plurality of telephone lines 34 connected to telephone network 32. 
Also, the information returned along network 1 4 may contain image information 
that is processed by computer 28 and transmitted as a conventional facsimile 
signal over one of the plurality of telephone lines 34 to one of the facsimile 
machines 36. 

15 

Network 14 connects through router 20 to a global network 22, in this 
case, the Internet. Computer 1 2 (or computer 28, or some other computer (not 
shown) on network 1 4) can act as a web server so that third parties can use 
browsers running on their personal computers 38 to access the web services 
20 provided by this system. In particular, these personal computers 38 will have 
their own individual printers 40 that can be used to print information such as 
advance directives that are downloaded over the Internet 22 from the web 
server 1 2. 

25 The preferred database 1 0 will contain a main table of persons/registrants 

sorted by social security number. The record for each person will include name, 
address, birthdate, telephone numbers, emergency contacts, as well as certain 
other markings or notations, signifying the existence of an advance directive, 
organ donation instructions, or a registration agreement. While the foregoing 

30 may be stored as text, this record can also include scanned digital images of a 
person's advance directive or other pertinent documents. These images can be 
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stored in any one of various formats, although storage in TIFF format is 
preferred. 

As described hereinafter, annotations in this main table that indicate the 
5 existence of a registration agreement will lead to open access to information in 
database 1 0 (including advance directives) to qualified recipients, such as health 
care providers that may be listed in the database 10 in another table (for 
example, a table of all the service care providers as described below). Also, the 
main table has notations indicating the state of origin, which will allow 
10 correlation with a jurisdiction table that lists jurisdictions that require open 
access. Using this stored information the system can determine if specific 
advance directives in the database 10 must be released under the laws of that 
jurisdiction. 

Database 10 will also include a table of service providers that can be 
independent sources of advance directives prepared by persons. For example, 
hospitals may obtain from their patients advance directives that are then stored 
in the database 1 0. This table of service providers is preferably indexed by an 
eight digit service provider (source) ID code. The record for each service 
provider will include name, classification (hospital, physician, attorney, etc.), 
address, information about the contact person for this service provider, network 
affiliation, classification within the network, and web site, as well as certain 
notations or settings, such as active/inactive status, whether Internet access is 
permitted, whether information retrieval is permitted, whether retrieval 
restrictions exist, etc. This record will also be marked with notations or settings 
indicating whether access to information will be affected by applicable state 
law, membership in a network, or classifications within that network. 

Since the foregoing contemplates that some service providers will be 
30 members of a network, the database 10 will also include a network table that 
lists the members of predefined common networks of service providers. The 
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network table will include identifying information about the network and the 
identification code for each of its members. The network table will also contain 
information about whether individual members of the network are considered 
a qualified member; specifically, a classification code indicating individualized 
5 membership privileges. These privileges can include the ability to store or 

access information or documents on the database 10 or the ability to prepare 
reports about information on the database. These individualized membership 
privileges can also be further refined by granting individual members access to 
advance directives stored by other members based on classification within a 
10 predetermined group of class designations. 

Other tables can also be included to identify network administrators with 
authority to make global changes affecting the network. This latter table can 
include the network identification number and the name, location, and telephone 
1 5 number of personnel authorized to act as an administrator. Using the foregoing, 
a group of hospitals may be virtually combined into a single network that will 
make available to all members of the same network, information stored in the 
database 10 by any member of the same network. 

20 The database 1 0 can also have a staff table constituting a roster of staff 

members that are authorized by a service provider to gain access to the 
database. The staff table can include the name of the staff member, an 
employee identification number, and the identification number of the service 
provider. This table may also include information about the privileges that will 

25 be granted the staff member, based on a level designation code stored in the 
database 10. For example, the staff member can be allowed to upload or 
download information about advance directives, or may be given the ability to 
prepare status or activity reports. Such reports can be a chronological report 
identifying who accessed the database 10 and the type of activity performed 

30 during that episode. Other reports can include a listing of the advance 

directives stored by the service provider on the database 10 annotated with 
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information concerning the frequency of access. 

The database 10 may also have a table of classifications for service 
providers. This table may include such classifications as: hospital, physician, 
5 attorney, estate planner, nursing home, etc. Each classification may be marked 
with settings or notations signifying the privileges that will be allowed for that 
particular class. For example, some classes may be allowed to only upload and 
store information or documents, while other classes may also be allowed to 
access and download information and documents. These privileges may also 
10 be established by providing another table of qualified recipients (third parties) 
that are listed with specific privileges, such as the ability to get information or 
advance directives from the database 10 in accordance with predetermined 
transmission rules. 

1 5 Referring to Figure 2, the present registry system 42 is shown with three 

major services: agent service 44, voice server 54, and web server 60. Agent 
service 44 includes the system administration function 46 where a system 
administrator can deal with such issues as loading or updating software, 
modifying or adding hardware, adding users, assigning passwords, forming 

20 groups, establishing group and user permissions, establishing router domains, 
etc. 

The database administration function 48 allows certain agents to control 
the database and to add, update, or remove records from the database. In 
25 particular, function 48 allows a database administrator to access and edit a 
table of agents. This agent table will be a list of individuals with passwords 
that allow them access to the database administration function. The agent 
table will include designations of the privileges that will be given to those 
individuals listed in the table. 

30 

Administration function 48 will allow an agent to add, update, or remove 
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records about persons who have signed a registration contract that specifies the 
terms and conditions under which their advance directive or other information 
can be distributed to third parties. 

5 In some instances information will be sent from a service provider such 

as a hospital, physician, estate planner, nursing home, etc. This information 
can include demographic information about a person who has executed an 
advance directive as well as a copy (traditional or electronic) of that advance 
directive. This information can be added to database 10 at a workstation 16 
10 or 18 using administration function 48. This service provider can provide 

information about itself by filling out a traditional form that will then be added 
to the database 10 by using administration function 48. Instead of being added 
to database 1 0 manually as described above, in some instances information may 
be added by completing an electronic on-line application. 

15 

With administrative function 48, an agent can add, update, or remove 
records in the table of service providers. Function 48 can also be used to add, 
update, or delete records from a table of individuals that the service provider 
authorizes to access database 10, including the privileges granted to each such 
20 individual. 

Database administration function 48 also includes a feature that allows 
an agent to obtain a new service provider identification number in case that 
number is needed before a record on that service provider is added to the 
25 database 10. Function 48 also includes a feature whereby an agent can 

automatically dispatch facsimile confirmation from computer 28 through 
telephone network 32 to a designated facsimile machine 36. 

The database administration function 48 also permits an agent to add, 
30 update, or delete information about service providers with respect to a 

predefined network of providers. The agent can access all the service provider 



14 

network records described above. 

Whether information is supplied indirectly from a service provider or 
directly from an individual that executes a registration contract, the 
5 administration function 48 will allow an agent to scan an advance directive on 
scanner 29 (Figure 1) to produce a digital image that will be uploaded directly 
into computer 28. Alternatively, an agent can import over network 14 a digital 
image file that was previously scanned and stored on another computer (e.g., 
on computers 16, 18, or 38 or on computers (not shown) connected to network 

10 26). An agent can also remove a previously uploaded document image file. The 
registry system can also accept documents that are faxed to it. Faxed 
documents, when they are received by the computer 28, are converted by the 
computer 28 from fax format to TIFF and stored in that format. (They are later 
converted from TIFF to FAX when they are transmitted to a fax machine. They 

1 5 are transmitted to WWW clients as TIFF files, to be displayed by any available 
TIFF-viewer on the client PC.) Faxed documents are thus received and 
converted by computer 28, staff enter the identifying information associated 
with the document, and the document is uploaded into the database 10. 

20 Also, function 48 allows the database administrator to define and modify 

a table of classes. Specifically, the class table can list classes such as: hospital, 
physician, estate planner, nursing home, etc. The database administrator can 
assign certain privileges to service providers depending upon their classification. 

25 The agent service 44 also includes a word processing application 50 to 

enable creation of new documents or editing of existing forms that need to be 
sent to some person involved with the present system. Also included is a report 
generator 52 for providing statistics on records in various tables, chronological 
or summary reports on transactions for all or some clients, etc. 

30 

Voice server 54 is implemented in previously mentioned computer 28 of 
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Figure 1 and includes a voicemail function 58 of the usual type, as well as a 
document retrieval/access control function 56. Function 56 provides a dial-up 
facsimile service. Specifically, a user can call into one of the lines 34 (Figure 
1) to access the call messaging system of computer 28. As noted above, the 
5 caller can respond to various verbal prompts and use a telephone keypad to 
send a service provider identification number (or registrant number), an 
employee ID number if applicable, a password, the social security number of a 
person that may have an advance directive, and any other information that may 
be needed by the system. In response, the messaging system will check the 
10 privileges afforded the caller and if appropriate respond by sending by facsimile 
over network 32 a copy of the advance directive requested. 

System 42 also has a web server 60, which is implemented by previously 
mentioned computer 12 (Figure 1) and includes a document retrieval/access 
15 control function 62. Function 62 provides web based access to database 
documents. 

For security, if a hospital or health system has a local network, they 
usually have a method whereby authorized employees go through an 

20 authentication process to gain access to that network. When such a network 
exists, the present registry system utilizes it as follows: The registry system is 
set up so that only those employees that are already authenticated on the 
provider's local network, can gain access to the system. Once an authorized 
employee is authenticated for access to the local network, and then attempts 

25 to gain access to the registry system, computer 1 2 then checks that employee 
identifier against its table to see if that employee is authorized to access the 
registry system and to determine at what privilege level they may access the 
registry system (access and reports, or just access). In this way, an employee 
could not access the registry system from a home computer or any computer 

30 other than those through which they can gain access to the provider's local 
network. Of course, if the provider does not have such a local network, this 
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does not apply. 

With web based access , the browser on one of the personal computers 
38 (Figure 1) can access a web page offered by server 12 and then login by 
5 typing a service provider identification number (or registrant number), an 
employee ID number if applicable, a password, the Social Security number of 
a person that may have an advance directive, and any other information that 
may be needed by the system. If the login is successful and the user has been 
granted the privilege to access database 10, web server 12 can send over 
10 Internet 22 an image of an advance directive stored in database 10. Once this 
image is displayed on personal computer 38, the user's browser can be directed 
to print the displayed advance directive on printer 40. 

Function 64 can be used by the public to locate a local agent (attorney, 
1 5 hospital, etc) for assistance in preparing and/or registering an advance directive. 
Local agents who have made arrangements with the registry system operator 
to provide this service are referred to elsewhere as "partners" of the registry. 

Function 66 allows the service provider to prepare chronological reports 
20 showing activity by various individuals, or reports showing the entry dates and 
revision dates of various documents uploaded by the service provider. 

To facilitate an understanding of the principles associated with the 
foregoing apparatus, its operation will be briefly described. It will be assumed 

25 that access to the database 10 will be sought over the Internet 22 using a 
browser on one of the personal computers 38 (Figure 1). If a hospital or other 
health system is gaining access through a local network, they usually have a 
method whereby authorized employees go through an authentication process 
to gain access to that network, as described above. The published URL of the 

30 home web page of web server 1 2 will be entered into the browser of personal 
computers 38 in the usual fashion. In response, web server 12 will send a 
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home web page using the hypertext transmission protocol (HTTP). 

If the user has not previously registered as a service provider, the user 
will be given the option to register and will be directed to a web page requesting 
5 the details necessary to register as a service provider. The user will enter the 
information noted above to complete a record for this service provider. In some 
cases the user will be in a network of service providers, for example, a network 
of hospitals. In that case, the user will need to enter a record for each member 
of the network together with the identity of the network administrator(s) 
1 0 authorized to edit or update the global parameters associated with the network. 

The user will be given an identity code for each service provider as well 
as an identity code for the network. .The user can also identify individuals that 
will be allowed access to the system with privileges that are designated in 
15 advance. Each such individual will be given a user number and password 

(personal identification number or PIN). In addition, the user can specify certain 
classes of users and designate the privileges that will be granted each such 
class. To complete this classification, user will then assigned class codes to 
each user number. 

20 

All the foregoing assumed that information was being supplied online. 
However, in some instances the user will complete a conventional paper 
application and send the completed form by mail or facsimile so that a central 
operator of the system can manually place the information into the database 10 
25 in order to register a service provider with the system. 

Once the registration process has been finished, an individual with a user 
number and password can now login and gain access to the system. As 
indicated in step 68 of the flowchart of Figure 3, the user will supply the 
30 identification code of the service provider (destination ID), together with a user 
number and password (PIN). In this flowchart the identification code of the 
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service provider is described as a "destination ID" to indicate that documents 
may soon be requested and that these documents will be sent to the destination 
associated with the identification number supplied during login. If the 
information supplied by the user at step 68 does not coincide with information 
5 previously recorded in database 1 0 access will be denied, but otherwise step 70 
will be executed. 

In step 70 the user will be asked to supply the social security number of 
an individual whose advance directive may have been previously recorded in the 
database 10. Computer 12, now acting as a database server, will look up 
records in the main table, which records are indexed by social security number. 
Assuming a matching record is found, computer 12 will now fetch this record 
and check to see whether the fetched record has been annotated as being 
controlled by a registration contract. In this embodiment the existence of a 
registration contract means that the person associated with the social security 
number has agreed to release his or her information in the database to a broad 
class of health care providers, including health care providers that may be 
registered subscribers to the system and entitled to use the system's automated 
features. Accordingly, information in database 10 will be released when a 
registration contract exists, otherwise step 74 will be executed. 

Step 74 and subsequent steps are indicated as being beyond the 
boundary 72, signifying that decisions to release information will be controlled 
by terms and conditions established by a service provider, that is, an entity 
25 other than the individual that executed one of the advance directives that are 
stored on database 10. In step 74 computer 12 determines whether the 
destination ID (the identification code for the service provider seeking 
information) matches the source ID (the identification code for the service 
provider that originally supplied the information being sought). Basically, 
30 computer 1 2 examines the fetched record to determine whether that record is 
marked with a source ID indicating the information was supplied from the 
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service provider that is now making an inquiry. In the preferred system, the 
service . provider that supplied information is always given access to the 
information that it originally supplied. If a service provider other than the 
originating source is making the request, then control is transferred to step 76. 

5 

In step 76 computer 1 2 examines the fetched record and determines its 
state of origin. In the preferred embodiment the state of origin is considered the 
state of the service provider that originally supplied the information, although 
in other embodiments the state of origin can be the state of residence of the 
10 person described in the fetched record. This state of origin is compared to a 
table of jurisdictions that require open access by law. If the state of origin is 
not found in this table of jurisdictions control is transferred to step 80, but if the 
state of origin is found control is transferred to step 78. 

1 5 In step 78 rules established by the operator of the registry system are 

invoked to determine whether information must be released under the laws of 
the state of origin. In one embodiment computer 12 will release information 
when the state of origin matches the state of the service provider seeking 
information. In other embodiments more complex rules of disclosure may be 

20 employed. For example, some jurisdictions may require release of information 
for documents that were generated in that jurisdiction without regard to 
whether the request comes from outside the jurisdiction. In such a case, 
computer 1 2 will release information whenever the state of origin corresponds 
to such a jurisdiction. Other rules may be implemented to accommodate various 

25 laws that may be promulgated in other jurisdictions. If however, no controlling 
jurisdictional law is indicated, then control is transferred to step 80. 

In step 80 computer 1 2 examines the records associated with the service 
provider seeking information and determines whether that provider is a member 
30 of a network of providers. If not, information is not provided, otherwise control 
is transferred to step 82. 
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In step 82 computer 1 2 determines the network affiliation indicated in the 
records associated with the service provider that originally supplied the 
information being currently sought. If the service provider seeking information 
is not part of the same network as the service provider that originally supplied 
5 the information access is denied, otherwise control is transferred to step 84. 

In step 84 computer 1 2 checks the records associated with the service 
provider seeking information to determine if its record is annotated as 
implementing class restrictions. If no class restrictions are indicated access is 
10 granted, otherwise control is transferred to step 86. 

In step 86 computer 12 compares the class numbers marked in the 
records of the service provider seeking information and the service provider that 
originally supplied the information. In one embodiment, if these class numbers 

15 are the same access is granted, otherwise access is denied. In other 
embodiments classes can be arranged in a hierarchy so that the service provider 
seeking information will always be granted access to information originally 
supplied by a service provider of the same or lower rank. Alternatively, some 
service providers can be given a high rank that allows access to any other class 

20 of records; or a low rank that allows access by every other class of information 
seeker. 

If information is denied, computer 12 will display a message stating 
whether information is stored in database 10 for the social security number in 
25 question and will give further information on how to go about contacting 
someone who can help get the information requested. 

Assuming however the service provider seeking information is granted 
access, computer 1 2 will display a screen giving appropriate text data gathered 
30 from the database 10. The user can now click on an icon to display the digital 
images stored in database 10. This digital image may be an advance directive 
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such as a living will, health care proxy, etc. The user may now print the image 
on printer 40 using the printing facilities typically associated with conventional 
browsers. In some embodiments, the user may request that the advance 
directive be sent by facsimile, in which case computer 28 will fetch the digital 
5 image, convert it into a facsimile signal, make a connection through telephone 
network 32, and send the signal to one of the facsimile machines 36. 
Computer 28 will only send information to facsimile numbers that have been 
prerecorded in database 10 as a number authorized by the service provider in 
question. 

10 

It will be appreciated that the facsimile can also be transmitted in 
response to instructions sent by using telephone 34 to respond to verbal 
prompts from the messaging system of computer 28. 

1 5 The foregoing system would work well as a national federal system for 

managing advance directives, allowing storage and retrieval of documents as 
overseen by a federal agency while, respecting and complying with the various 
state statutes already in place. 

20 It will be appreciated that various modifications may be implemented 

with respect to the above described, preferred embodiment. In some 
embodiments the database can be a distributed database located in different 
localities with a steering system that allows requests to be directed to the 
appropriate locality. Also, the records of various individuals and entities can 

25 include a greater or lesser amount of information depending upon the specific 
applications. While an Internet connection is illustrated, other systems may 
employ private networks, virtual private networks, satellite links, closed cable 
systems, or the like, that communicates with any number of protocols. Also 
embodiments are contemplated where documents supplied by a service provider 

30 can be directly accessed by the person described in the document, and vice 
versa. It will also be appreciated that networks can be formed among entities 
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of different types, for example, a network including hospitals and estate 
planners. Also, these networks need not be part of a single business entity but 
may be a loose confederation that wishes to share information. Also, it will be 
appreciated that systems that implement rules to accommodate open access 
5 laws of some jurisdictions may be implemented by equipment that is located in 
an unrelated jurisdiction. Also, embodiments are contemplated where service 
providers can generate their own user-defined rules for granting access to their 
own staff members, to network affiliates, or to service providers with whom 
no pre-existing relationship was ever formed. 

0 

Obviously, many modifications and variations of the present invention are 
possible in light of the above teachings. It is therefore to be understood that 
within the scope of the appended claims, the invention may be practiced 
otherwise than as specifically described. 



